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A METHOD FOR MANAGING PUBLIC KEY 



BACKGROUND OF THE INVENTION 



P (Internet Protocol) HtCWi'JT'f hn;i/TS5 I P S EC (IP 
SECurity) ^5. I P S E C izmTzmWfXmt LT, IETF (Internet 

Engineering Task Force) f§fr<£> [RFC1825] "Security Architecture for the 
Internet Protocol." (R. Atkinson^) ^^6tlTV^ 0 

I PSECt:#i1-^lfl7 s nh3jHt ^HSlBiP-^^xA&fiJ^T-Sfe© 
H^Synhn^fcMt-^^S^.hbT, MMtimmrV "Simple 
Key-Management For Internet Protocol." (1F# : Ashar Aziz, Tom Markson, Hemma 
Prafullchandra)#tC|2«$nfeSKI Pt^nSK^^ie>nT^S„ £4T> H 

ne>C0^XhA, B«, I PSECfCS^^®HBt^vX^A^J;oT^illI 



mmvr^ofsii p sEc\znm-r^>^mwi\z^mmm^ubnjm. ±* 
mmm^m\z^K^o^mm^^mm^^±\z^m'^mm^<, tvm^ 

^W£V\Z£& / £f$W£0^^^<D^fe\zM&Z\h\Zf£ 

^zt^omm&.&^LT^Zo ^fc, z.(Dm^ mmo^mwM, ^yby—z 

SUMMAEY OF THE INVENTION 

5<hT3 2^<D*xh^®MF^]tuK&^ 

hu-^t^(DY^>^tTYuxt<DMJt^mmr^mm^mmm\zmn^n 
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^V^tJitS^Sffi^.. ir^^U^^®#^^B#, IUIB^m^^'ar^i±^^® 

£<z)ftWcA*fA°^ry M^vit, -eom^w £<Httsu BfcfiSnT^SA*/^ 
tizkvmj&znzo 
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^mmx^^m^mm^xb(Dm^m^^mr^mzn^^, ^ni^ko, 

Pp^V^M F >%,\zftmVX^%>& o \zMMfrft%> Z. h &m±-?Z£o\zVt£ 

t^^ns^ h^Mffl-rsDNsif- rt\z&mti& ! &n>ry b\zn?m%*m-t 

y^\z^xmm^^i>Ns^-n^m^^yjkmmm^^^'ry bomzu 
m&ff o dns -y— a©#:£M e>-r c 1 «t o &ran©ifc$§£2&¥W&fca> t-r s 
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IETF fg?T£>:£l£ [RFC1035] " Domain Names - Implementation and Specif ications" 
mm:?. Mockapetris)^^BJ$nTV^o 



B RIEF DESCRITPTION OF THE DRAWINGS 

m 1 }t^m<D— ^ffimWi\Z&tfZ>KMS (Key Management Server) <D#lEfc£^ 

mm s • km s fit^ d ® d t § n^r hommt^n^iz^^n^m^m^ 

DESCRIPTION OF THE EMODIMENTS 



m 1 te^mWO-mffi&MOtemm^Wi/^&lZ&tfZKMS (Key Management 
Server) ©ilJSSt^ny ^ 0, 02ftDNS^M7>h ©HMB&ft^JfcX h CD 

t H ;* -f 0 4 teD N S 

•t-?uyzm, ms\t^h^mmm^o^mm(DMm^\zn^^m(D^x\ *x 

h • KMS f^&tfKM S-KMS f^T^ D 3t 0 1* 5 Ktr v Y OWmt'tn £ 

nzm^mz *mm~r %> m. m 9 &d n s ^ h ©7 * - v y b ©^ssa^-r & 

5^5. 01, 02, 07, 08£:fe^T, lOttKMS, 11, 2 1tt^h 
y-^M^> 12, 2 ZUIPmmffi, 13, 2 3}iTCP/UDPW, 14 
te&lSDNS#lSg&, 15tth , M>«/IP7KWf-^K 16, 2 5tth*^ 

-r • ^im • ir?W£er-^, 17,26 tmMte&T-** 2 4^?sdn 

S^5K7>K 2 7teir^0x^®f§»§^ 10 1tt^h7-^ 14 1, 
241ftDNSA^>yM^^ 14 2teDNSMS^ 1 4 3 tt&IMMV^ 

^it/jiS^ssB, 1 4 4 \tn^m^9mm. 2 4 2 f u i/;ws, 243 

te&l§§§i^V^fc>i«SS&, 2 4 4}j;tff^M, 7 1, 7 5te*XhA, B, 
7 2-7 4, 7 

n^ViT0 7 

0 7tin^h7-^yXfAH ^-yh7-^«Mffi, 
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5KMS 1 (7 2)l^UT^hB7 5 (D&W&Sffilv&fri**. 

XbB7 5 0^ii©f-^^§^l?)©^(M^ffi©*X hB 7 5 

KMSOtff^felttS. *XhA7 ltfflMTrSKMSHKMSO 

0(7 4)mm. KMS0 0(7 4)©^III1 *XhA7 

$XhA7 imhB7 5©^IB»©x-^&^"rS^, KMSl(7 2)tt 

«bTV^KMS 0 0 (7 4)JC*7 > hB 7 5(D^li©T-^Htf f 
tt3<£5f;:^rr£o KMS1(7 2)H *XhB 7 5<D / £fflm(D : T-?%gf 

otSHS^, _tft<Z)KMS 0 (7 3)^lv£fcrB;£o *XhB 7 5 0^18 

«S^&n5.KMS 1 (7 2)d^0^t)tmfc*XhB 7 5©^|»© 
T-^^T^5KMSH KM S 0 0 (7 4) t^S^f W^S^TS. 

ffI^&#ttSi5l:S^nfcKMS 0 0 (7 4)H, gf)®tff^S:#^ 
^XbB7 5©&PI§St©5 s --*£KMS 1 (7 2)KIjETo KMS 1 (7 2)Wu 
hB7 5©4iM»0f-^^hA7 lfcjg-To Z(Dm&, *XhA7 1 
KMS 0 0(7 4)0^il»^oT^SfcJC)^n^fflT#Sx-^^S*^ i PJ»f 



9 



DNS/^^Mi 0 9^^1-^-51-, DNSA'^9L Fp^£-:bitg&9 2, 

^tHtflntif#&§&9 5 3&>6J5K5. Sfc, 1211 CHC^T^Kl, DNS/\°^ry HC^n 
SMjHI/3-H(D1^1?^§TXT1/3-H^ ^frf^-^Fl 0 L TYPE7 
^-JVH10 2, CLASS7^f-JVHl0 3, C(DSMI/3- K#^T £>*rf^ 

^^^3.$nTv^^f B if H iPi^^'rTTL7^-;i/H i o 4, x-^s^-^f i 

0 5, "f— 97 4— 1 0 6#»£>fo3o 

n^TY p e= 1 6 ommvn- fk, temmm^tD^mmRzs&rmfo^mm* 

^(DMJ^^-rAl/n-H (TYPE=1) , /-Jl/'X^X^i^CHM^ 
(TYPE=15) 

0|t§ o Billet, &:/ay#£^^llteA 0 ^ry h<Dgtt$gb£fr om%^ 

KMSlOti ^«yh7-^iHBIllh IPMl2t, TCP/UDP 
F^-T • • ^W^^-^;!/ 16t, SJ^^f^-^ 1 7 <h£fii;JLT#|j& 
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iHSDNS&MBl 414, DNS/^*; hSO ^tfiRl 4 1 t* DNSM14 2 

^^^^/j^mssb H3t, nf-m&wmu 144 1 ^^t«^ 

I P (Internet Protocol) lc£oT^ DI&D £n&/^y hOSIgfS&lJl&fTS. T 
CP/UDP^I3l3{t I PM1 2©±&Kl&oT, TCP/UDP 
(Transmission Control Protocol/User Datagram Protocol) ti^T^OStD £frl 
hCOSI^MSSff^o TCP/UDP11S13I1 DN 

lDNSllg|514t:I§, m\Z, tlDNSMH^l S S£jj£bfc/^»/ h 
£Mfrf3<h^\ f OM t^f 7 b C P /UD P ffll^ 1 3{cMSo 

^DNSIIil4{:mDNS/^7 hMQfttfUl 4 1 fck TCP/U 
DP»1 3fr<bDNSA^y h£^ttJ&D,01 0 fcj^rBWf 1 0 6 l^lT 
DNS MStpft 142, ^IB«irav^t>-&/*«iaS|5 143, ttm^lBMB 1 4 4 
<DpW>£tlfr\ZDNSrtiry h&MQfttf&o DNSMl 4 211 TCP/UD 
PMSBBl 3^5O«0DNS/^7 hS^ttElO, F I FTFUXt 

i©KM S £ 0&it©Pl^t)t^tiD N S A°^r y h <DBT»T CP/UDP 

3 1> 2, *X hMt^KMS Wfciff ^3 3, n?m&*tttf 

fcKMSCQKMS£3 4 , X> h U O^Bt^^^-T^-T AX^ >y° 3 50500^ 
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^w^-:^ 1 6 tcx> h g a*&ftfc£, pg^^t>-&©s^tc:^o t^okm s 

h£«^££*ws*ra£fT'5. ^wsirav^fr^/jft^asgBi 4311 
h ;*-f • • m^^^-y;!/ 1 6 £X> h g 3&*fcl> t TCP /u DP 

H£^&£$£3SD N S y h OfTT CP/UDP MSgS 13^ £^#5^ & t 
^V^t)f Og^fc^o TffiOKM S ^S^i^Og^Sltit^, 

KMS 1 0 OT^J^-* 1 7 »lTt^. «J«!^x-^ 1 7 
\$. DN S (Dlf SiH*3ViT±tOKM S 0 H 

F*-f>£ -2^111 7 3j&>£j£5. KMS 1 OH fttDKMS^li^fpl^fc 

*Xh20il ^h7^«»»2 1i:, IPMSg&2 2£, TCP/UDP 
#t3S^2 3t, SlDNS^M7>h24i, ■ &@fl» • m^^S^- 

^2 5^, Wjfr^2 6i: < ir^a. g ffifMS^S 2 7££iI*.T«Jjfc£ 

fc, $£5MDNS^^<T>h2 4H DNS A°^ry h«5H«2 4 1 K*-f> 

£g v/;wt2 42t, / j>mmm^-t>^mmU2 4 3t. m^m&m%^2 4 4t& 

Wi^&^T, *Xh2 0H KMSt», *y h<7-^fiJTO2 1, IP 

mmffl22, tcp/ / udp5o ; s^2 3&&%s iPT-^h7-^2o 1 
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TCP/UDP»2 3tt DNSfoWlQmTZntzVfry 
A^y Wiry h&ifi3BDNS^7-<7>h2 4 £21*. 

h^TCP/UDPMI!2 3\zm&o 
&3SDNS^5K7>b2 4 |*|CDDNS A^ry hSD#tfg&2 4H1 TCP/ 

k g vowi 2 4 2H flasoDN s ?4 r y v tmm\z, f 

U*£mv£t>i*5l&, HM>«UyM2 4 2H TCP/UDPM2 35 

^t§M ! bTCP/UDPM2 3£3IbTgfIT£o 

F;*^>£fc;ttJfcr5&E3i&#fc^ 4 3 

tt, *^^#fc^BI«©fll«*H^-r>*-^PBIft-« : ? : *«'r-^;i/2 5fcft#U 

^^tW2 4 3^^ofc^iS^(Dlffg^^T^M^^-^2 6|*I<D 
ifflt5KMS(Z)KM>^- / A v iil2 6 3^#ibT, &0B«i©1» SRfctt^T^S 

&B!iim^fc>imSSB2 4 3fl Mfflt5KMS©K^>« • &HI§I2 6 3 

2 6 3 0*a>S&3ifcfIffl*r ^KMS^Mt?). *Xh2 0H *K 
JM^-^2 6rtKg#©K*-r>£-&ra&2 6 1 t±tiL<DKMS<D}**4>£ 
2 6 2 ££j#t>, / ^F ? llFI^'&btW2 4 3tt, ^^^^Pp^^^fCff < 
g#CDF^>£-^lfl^2 6 1 t±&0KMS0l^M>^2 6 2 
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t^a'jf-f mmumffl 2 7 n ^mmm^t)^m^ 243 ^#b^sm*s^ 
wry hommt*nz\ztf*2n%n^%**?®z&&MLT**f& 

BUt^T, KM S 0 (7 3), KMS 1 (7 2), KMS 2 (7 6), KMS 0 0 (7 
4)H 0H:«tOiKbfci^^KMST*D, ^hA71, B7 5 

^UT, KMS 0 0 (7 4)11 F ^-f x x Y V — 9 7 0 1 \zmm 

KMS0{7 3)H F*-f>£a. x x £ftfO*y b 7-? 7 0 2 fcggjfcSn 
Tl^o ^ ^XhA7 1<hKMSl(7 2)tH F*-f>£b. a. x x 

h>7-/7 7 o 3\zmm^n. *xhB 7 5 ^kms 2 (7 6)in H^-r>^c. 

a. x x^O^>y 7 0 4 Cii^nTV^o 

(7 6)CD^itoTV^^O#KMS<D»jf^^UT43D, i8ll^t^ 
EMI *XbA7 l^XhB7 5©^iBSIS^-rSIRfc, ^XhiKMSiOFI 

^kms ^kms tcD^T^D^o-r^A 0 ^-^ Y^wry Yizmwt^n^m&o 
ii^iti^. /i^ryh©a^n ^^^v^t?i±, n^mzm^ ^mmm 

&*>\Z. ^<D^O\Z^m^tVZ^-h(Dt.t^. 

S (K, [a, b, c] ) iUKJCtO^yfe-^ [a, b, c] Km^W£ 
D (X) : X<DYM>% 
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S (X) : 

t cx) : xom&m 

IP (X) : XCO I P7H 1/X 
KMS (X) : X^tm&S^tSKMS 
ETF\ *XbA7 l*iSff«SS^r5KMSMMS 0 0 (7 4)T&3«i: 

(1) £f\ *XhAll *XhB7 5 CD^iiti&K^t)^/^^ h^KMS 1 

S (T (A) , [D (B) , KMS (A) , IP (A) , D (A) ] ) 

^XbA^a^iC^Dm^W^SffofcfeOT^^o KMS 
1 (7 2)^7, hA7 li^*XhB7 5 ©^HStS^V^^S A°^r y b&Stt 

(2) KMS 1 (7 2)te> Xf^y4 KDflJ^T, ffiW&;foi*7^y htfffi&KSfrlT 

i^*^ m i fc^*r^w«^v^t)^/^5aagi5 143 &mft%-&* pnv^t) 

«X>h'JtMt Uf7^4 3, 4 2) o 

(3) Xryy4 2 0^t, h7-f • ^Hi • iff «f-^ 1 6 l:i> h 
iJ^ofctf,i7l:^tKMS 1 (7 2 ) ©^il^^fet/M®!^ 1 4 
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3«u m*&t>ik<a&'Dtzftz h©H^-r >^ta^©H^-f ^tto^T^n-? 

c. a. xx^KMS 1 (7 2)©lt5^7 h^OHM^b. a. xx&— 

(4) Xfy^4 40|lJ^^T^7 h^-^O^^-gbfctt, 07CDKM 
S 1 (7 2)H^XbA7 llC^bT*XbBfc^-rs^BI^*^T&S^^& 
StfcrTS Ufy^4 5) o 

(5) *^y74 4©#J£fc£Vvr*y b7-^fl)WHSU^fcit, KM 
S 1 (7 2)tt,01 iZftZWmftft?-? 1 7|*JCD±&CDKMS(DK;W>£ 17 2 
^#iLTF«^^bt*^i<, KMS 0 (7 3)H*XhB7 5<D'&m&&ffl\<^t> 
•&So £0«£<DffiVv&;bi3:A£-y hH 0 8 l3^E|J8 2 \Z& D^Tcfc? ^ 

S(T(KMS1), [D (B), KMS (A) , IP(KMSl), D(KMS1)])T 

O^KMS 1 (7 2)©I P7FI/XMMS 1 (7 2)©HM>^ft- 

ytu kms i (7 2)osa?«i&« : ?*«©iitt*rs«-?w« : £#inbT«i^$n 

(6) #cfc, KMSl(7 2)tt, SKMSfc^PB^^^^fc^^Xh^KM 

(7) X^y^4 6 1T\ gKMSt^^P^l^t3-&fe^*XhTS5^> 
^^H^V^t>-&/|i&^S^l 4 3 ft, ±fi:ODKMS^e.^iaSI©JS^*SST 

fc>5>o&»&, MHSJRT-TS Ur*;^4 6 2, 4 6 3) . 

(8) &B§Hf^-&frl£/Ji&^iiaB 1 4 3te, m^W£tf£©&IBSi<BJSg;&*-5£ 
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l:Ito £©S«£tt#©&Mi&i&g/^y Ml D(KMS1), D (Bh S(B), 
S(T(KMS0 0)), [D (B) , S(B), D(KMSOO)] */-fe-S?£U 
1T(KMS l)£g£©8£'r5&© , r&S 6 . 

(10) X5^:/4 2©r- XOilT, P«^V^t)-&(7)H^-r>^tCOViT, F 

^-f • &iiit • «^*«5=— ^ 1 6 i:x> h u ^^fe|A 0 ! ^-r^nn 

IF«1^-&^t/^lI^ 14 311 ^0I> h U fcmjgSft&KMS 
tt^T^£^S^£jl£ (Xfy^4 7) o 

(11) Xf^^ZO^iy^T?, ftJ£Sn^KMS©m^W^X>h«Jfc#^T 
Wd!§£\ ^H^^^^it-/Ji&^S^ 14 3ft ^©X> h u fc&sm^Mf* 

(12) — XT7^4 7Tfi^$nfcKMS©S^i&^X>hUfc#ViTV^^ 
•3 &§l§tF4^Mr^^MSg&l 4 3(1 A°^y HCtf^TV^^XbA 
7 l^fifflt-^KMS«hiIl©?M^^-^©±^:©KMS©F^-r>^l 7 2 
SlT,g|7l:^tKMS 0 (7 3)(Cl|^W^©^^ffiTo0 7^TKMS 2 (7 
6)m>B7 5©&PBgi©1fc&£!#oTV>T, KMS 0 (7 3M~mTW£©^£ 
^ffl*r«-&, 08©^HJ8 4^fJ;^fc, [D (B) , KMS (A) , IP (KM 
SI) , S (B) RXSD (KMS 2) ] yt-z? tVT, KMS2(7 6)©M 

liTH H7 fc^tf^KMS 1 (7 2) (Dmmz^^xmmVrc^K iOKMS 
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0 (7 3), KM S 2 (7 6)fc, MbitKMS 1 (7 2)©£^£|!TOfc»fe£fr'5. 
05^-ryn-i07SLOT8«h^#MLT, il^TKMSO^ 

(1) 0 7i:^TKMS 0 (7 3)J&*, KMS 1 (7 2)frSm : f^&©g3&£g: 

frtfct*rs. £©3§£\ KMS0(7 3)fc£, mfc^<fc5&#/££&Ogggrt©m 
"f-mZmW^l 4 4£®jf£$i3\ A°^ry MC#^TV^m^W«*^.5o 

agpi 4 4«, H^-r^-^paat-m^^^-^n 6^&kms i 7 2©&n§ 
n^momuA*^ h^^«$nxv^^^^^t^Uf7-/5 Do 

14 4«/^7h^liU KMS0(7 3)^1I^T1"§ (7ry^5 3) . 

"T£ 2) o 

(4) ^fyy5 2©2WJ6T?, tff^Ol^l^l^^^i^ VjHKffi 
SgPl 4 4H S) Wf-^C±fiCDKM S 0 H^^ 1 7 2£#8IU 

#T5KMS*JKMS 0 0 (7 4)T*S^, 08 0^8 5l^t"i;-5i', KMS 

0 (7 3)j5>£>KMS 0 0 (7 4)^<Z)«T^^A°^r ^ H3U [D (B) , KMS (A) , 

1 P (KMS 1) > S (B) mSD (KMS 0) ] ^yt-5?tl/KMS 0 (7 3) 

(5) 7fyy5 2<D^t, 11^W£©^ft^a#g#T&ofc^ H 
^^flLMS 1 4 4 fcfc, gsftS ftfc/t* y h LT g #©*B!&fcK:«k o TH^f £ 

^7G©KMSK:m^W£tt#©A^h£MTo l£BJ3bT^3#IT\ Mx. 
fc£, f^l:WlTKMS 0 0(7 4)#KMS 1 (7 2)^M^S:JiB^*rS s b©i: 
T^<h> ^©^©Jftg/I^y H3U 08©^8 6\Z^-T^o\Z, [D (B) , S 
(B) (KMS 0 0) ] ^^7t-yttKMS 0 0 (7 4) ©|&$?gS£Si£T 
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(1) 0 7 11^1, ^XbA7 l^xhB7 5 (D&mmZm^V&O tTSfeCD 
4 311 K*-f>£ ' / £mM-m^m% : r-7)l2 5^iUXhB7 5 0X>h 

(2) Tcrv*?* 1T\ H^-f >*-^M«-m«l*5 i - ^2 5l:^hB7 5 

®(IJrr5KMS0F;*^>£-&PB»2 6 3£#J!BLTf§/fl'r5KMS&StftU 
iffl^KMS©K^'f>^- / A«2 6 3*«*fti&3»£\ m^t>#« H^-f > 

(3) &\z. / £mmm^t> j &mmt&2 4 3n sow&Erx-* 2 6i%D&ra3i£ra 

fc^fcrttrfclfT <KMS0h^^>^2 6 2$#IlT, J e®KMSH^XhB7 5 CD 
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